Xbase++

Set the Signing Certificate and Private Key

Demonstrates the Chilkat Email.SetSigningCert2 method, which explicitly sets the certificate and its corresponding private key as separate objects for sending digitally signed email. This example loads a .cer certificate and a PEM private key, sets both, and enables signed sending.

Background: When your signing certificate and its private key are stored separately — a public .cer plus a PEM key file — rather than combined in a PFX, SetSigningCert2 accepts the two objects individually. It is the two-object counterpart to SetSigningCert, which takes a single certificate that already carries its private key.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oEmail
LOCAL oCert
LOCAL oPrivKey

nSuccess := 0

//  Demonstrates the SetSigningCert2 method, which explicitly sets the certificate and its
//  corresponding private key (as separate objects) for sending digitally signed email.

oEmail := CreateObject("Chilkat.Email")
oEmail:Subject := "Signed email"
oEmail:Body := "This message will be sent with a digital signature."
oEmail:From := "alice@example.com"
oEmail:AddTo("Bob", "bob@example.com")

//  Load the certificate (public) and the matching private key from separate files.
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadFromFile("qa_data/certs/signer.cer")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oEmail:destroy()
    oCert:destroy()
    RETURN
ENDIF

oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oPrivKey:LoadPemFile("qa_data/certs/signer_privkey.pem")
IF (nSuccess == 0)
    ? oPrivKey:LastErrorText
    oEmail:destroy()
    oCert:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

//  Set the certificate and private key used to create the signature.
nSuccess := oEmail:SetSigningCert2(oCert, oPrivKey)
IF (nSuccess == 0)
    ? oEmail:LastErrorText
    oEmail:destroy()
    oCert:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

oEmail:SendSigned := 1

? "Signing certificate and private key set."

//  Note: Paths such as "qa_data/..." are relative local filesystem paths,
//  relative to the current working directory of the running application.

oEmail:destroy()
oCert:destroy()
oPrivKey:destroy()